Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F28816429EC11EDAB34EC6AC4F9AE02.roa
File:                     6F28816429EC11EDAB34EC6AC4F9AE02.roa (raw, json)
Hash identifier:          qmUAPKlG4ugeeZLN7t1+50YbQXeqI3/cWV4asC3aH/s=
Subject key identifier:   4E:DD:CA:51:E6:23:9D:57:5E:83:41:96:5F:F2:10:23:93:29:1F:EA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F071
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F28816429EC11EDAB34EC6AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:51:08 +0000
ROA not before:           Mon 06 Jul 2026 16:51:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135850
IP address blocks:        103.97.85.0/24 maxlen: 24
                          103.97.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61553 (0xf071)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:51:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdcfb-9e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:48:99:a7:50:7a:a2:34:b9:fb:22:87:7f:9f:
                    aa:4a:db:01:5e:ed:bd:f6:1e:c9:89:cd:65:ce:23:
                    78:8a:80:ac:cf:f4:37:f6:b4:d3:d3:a3:06:c9:a2:
                    32:46:e4:48:39:dc:e9:75:0a:03:00:4a:28:0b:6b:
                    b6:04:91:0b:cf:8d:6e:25:1c:f0:51:b2:21:74:05:
                    e3:4e:c2:24:f9:9a:01:fc:e2:44:7c:fe:e6:b8:66:
                    c0:8e:85:2b:e1:ee:e5:e3:72:33:ed:e6:6e:43:d0:
                    0e:b9:57:69:97:2f:a0:3d:ca:91:5a:76:99:5a:66:
                    94:98:43:9a:9c:38:e9:2d:ac:74:8a:e2:45:be:1a:
                    65:cb:e3:92:ae:66:44:24:bb:ad:c1:dd:f5:b7:52:
                    1d:d8:cc:bf:33:51:c0:0a:e1:e5:0f:e7:39:ba:fb:
                    72:93:ca:e1:79:64:56:37:75:2f:08:8b:32:67:5e:
                    7a:e1:44:91:c2:eb:cb:8a:5b:b1:55:77:a7:6f:1a:
                    e8:97:99:0d:b1:8b:e3:16:bf:37:34:d0:45:26:77:
                    d6:40:47:d6:2d:6b:1d:80:a5:6a:54:79:a0:31:36:
                    4c:6e:20:0a:55:b5:58:f6:ad:74:36:4a:75:78:87:
                    14:d0:1a:11:04:cf:89:3a:86:20:3b:21:0f:e8:fb:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DD:CA:51:E6:23:9D:57:5E:83:41:96:5F:F2:10:23:93:29:1F:EA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F28816429EC11EDAB34EC6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.85.0-103.97.86.255

    Signature Algorithm: sha256WithRSAEncryption
         76:38:9a:e1:e1:1c:35:15:6a:11:0a:fd:3b:bd:5e:5c:62:ce:
         fd:79:ce:03:a4:ad:17:59:57:e7:37:26:4b:a4:86:c7:c4:2e:
         a7:73:b2:15:02:28:74:eb:2e:c2:b4:8e:54:d6:25:2d:d8:f4:
         40:0b:6a:49:a4:ad:5a:c3:51:56:56:3c:35:a6:ca:0d:45:a0:
         06:2c:cc:20:23:cc:bb:f7:7a:62:55:62:61:72:10:85:82:9b:
         da:40:d4:76:7c:91:9d:9a:ed:ea:c8:11:29:1f:d6:c5:9f:06:
         49:5a:6f:85:f3:7f:13:84:da:67:57:59:88:0c:45:3b:24:c3:
         f9:89:d6:e3:8b:ed:0e:f2:7f:15:97:60:c4:78:f7:4f:2d:01:
         24:72:67:50:d5:30:89:8c:15:10:17:f4:db:70:83:51:eb:2b:
         2d:f9:7e:c9:55:19:44:92:30:e1:f9:74:da:72:33:0f:34:5a:
         e5:7f:9d:eb:f7:5e:1c:73:7e:3a:28:4a:a9:30:3c:58:10:74:
         0b:b7:bf:ff:20:ce:e5:94:ce:0b:42:a4:79:f0:29:58:ad:d9:
         52:44:e4:ab:63:85:58:a1:40:f9:0e:48:61:bc:7d:8b:e2:5f:
         fa:7f:ec:d0:9f:79:1d:e3:ff:85:1c:7c:0e:8d:80:ab:54:5d:
         28:6e:26:2e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIDAPBxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NTEwN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRjZmItOWUxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN5ImadQeqI0ufsih3+fqkrbAV7tvfYeyYnNZc4jeIqArM/0N/a009OjBsmi
MkbkSDnc6XUKAwBKKAtrtgSRC8+NbiUc8FGyIXQF407CJPmaAfziRHz+5rhmwI6F
K+Hu5eNyM+3mbkPQDrlXaZcvoD3KkVp2mVpmlJhDmpw46S2sdIriRb4aZcvjkq5m
RCS7rcHd9bdSHdjMvzNRwArh5Q/nObr7cpPK4XlkVjd1LwiLMmdeeuFEkcLry4pb
sVV3p28a6JeZDbGL4xa/NzTQRSZ31kBH1i1rHYClalR5oDE2TG4gClW1WPatdDZK
dXiHFNAaEQTPiTqGIDshD+j7fbMCAwEAAaOCAmgwggJkMB0GA1UdDgQWBBRO3cpR
5iOdV16DQZZf8hAjkykf6jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZGMjg4MTY0
MjlFQzExRURBQjM0RUM2QUM0RjlBRTAyLnJvYTAnBggrBgEFBQcBBwEB/wQYMBYw
FAQCAAEwDjAMAwQAZ2FVAwQAZ2FWMA0GCSqGSIb3DQEBCwUAA4IBAQB2OJrh4Rw1
FWoRCv07vV5cYs79ec4DpK0XWVfnNyZLpIbHxC6nc7IVAih06y7CtI5U1iUt2PRA
C2pJpK1aw1FWVjw1psoNRaAGLMwgI8y793piVWJhchCFgpvaQNR2fJGdmu3qyBEp
H9bFnwZJWm+F838ThNpnV1mIDEU7JMP5idbji+0O8n8Vl2DEePdPLQEkcmdQ1TCJ
jBUQF/TbcINR6yst+X7JVRlEkjDh+XTacjMPNFrlf53r914cc346KEqpMDxYEHQL
t7//IM7llM4LQqR58ClYrdlSROSrY4VYoUD5DkhhvH2L4l/6f+zQn3kd4/+FHHwO
jYCrVF0obiYu
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:10 2026 by rpki-client